Search results

feat: GET /agent/:id/volunteer-linked — volunteers connected to an agent via its opportunities

enhancementNew feature or requestNew feature or request

Status: Open.

#759 In need4deed-org/be;

· nadavosa opened on Jul 13, 2026

bug: agent's own address is always masked, even when the caller is that agent

bugSomething isn't workingSomething isn't working

Status: Open.

#752 In need4deed-org/be;

· nadavosa opened on Jul 13, 2026

Add startDateTime column to opportunity for server-side sorting of event and accompanying types

Status: Open.

#746 In need4deed-org/be;

· nadavosa opened on Jul 11, 2026

feat: Infomaniak SMTP email transport

Status: Open.

#736 In need4deed-org/be;

· arturasmckwcz opened on Jul 6, 2026

feat: allow changing opportunity type (accompanying/regular/event) via PATCH /opportunity/:id

Help out

Status: Open.

#730 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

Security: document SIGN_COOKIES and JWT_SECRET entropy not enforced — add to .env.example

Help out

Status: Open.

#729 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

Security: PII (email) in production warn logs — remove or redact

Help out

Status: Open.

#728 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

GDPR: no right-to-erasure endpoint for volunteers (Art. 17)

Help out

Status: Open.

#727 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

Security: Swagger UI accessible without authentication in production

Help out

Status: Open.

#726 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

Security: no rate limiting on auth endpoints — brute force possible

Help out

Status: Open.

#725 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

Security: document upload/download is mocked — real S3 presigned URL flow missing

Help out

Status: Open.

#724 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026

Security: SSRF in document download endpoint — validate URL against allowlist

Help out

Status: Open.

#723 In need4deed-org/be;

· nadavosa opened on Jul 2, 2026